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DIRECTOR OF CENTRAL INTELLIGENCE 


Security Committee 
SECOM-D-278 i 


7 July 1980 


NOTE FOR: Chairman, SECOM 


FROM: 
Executive Secretary 


SUBJECT: Possible Items to be Raised with L____ ss STATINTL 


Chairman, Computer Security Subcommittee at 
2 p.m. Monday, 14 July 1980 Meeting in Your Office 


Vor your Background: 


i. I've invited STATINTL 


2. [__] took over from a previous NSA Chairman ee 
was so disliked by the Committee that they used Robert' 
Rules of Order to dismiss him. His first year was cneit 
mending fences. 


3. Computer Security Subcommittee members are not ; 
security officers by career designation (with the exception 
of cae | They are substantive computer system managers. 


For Discussion: 


4, DCID 1/16 was premised on tenets that computer state 
of the art offered small protection. Thus 3 types of security 
criteria was imposed in 1/16. 


Dedicated Mode - the computer and people are all 
cleared and dedicated to the 
task at hand. 


Compartmented Mode - Uncleared people and material 
are removed from roem while SCI. 
is processed, 


System High - Everybody is cleared for the 


highest level material stored 
in the data bank. 
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5. The Community seems to have elected "System High" 
as the way to go. Like the mandate that anyone near a 
gray/green phone be given an SI clearance, the "System High" 
approach forces a proliferation of access approvals. "Syste 
Wigh' was designed to handle the possibility of a spill or 
dump of sensitive material to those who don't have need for 
it normally. The thinking was that a spill in a population 
cleared to 1/14 level was not as bad as a spill someplace 

in a random population. 


Questions 


Q. In 1980 are there hardware and software improvements 
in computer security to the degree that lockouts 
can keep uncleared people away from material they 
shouldn't have? 


This becomes important as[_ Fomes down the road 25X1A 
and as computer networking expands. 


Q. What advice can the Subcommittee offer on how to 
INTL handle the SI-TK aterial now in data banks 
becomes the only system? 
Q. What are the big threats to computer security? 
And what does the Subcommittee propose to do about 
them? 


Q. Does the Subcommittee have adequate association 
with other computer elements to keep abreast of 
improvements? And government policy? 
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your background _on 14 Jul | 
meeting with[ 
—i Chairman, Computer Security 


Attached is material-Fer 


Subcommittee. It includes: 


° Adm. Inman's nomi ire 
letter. STANT TL 

* A bio sketch on 

* A copy of his Committee's | 
Annual Report 

i 


Some thoughts you might] 


want to raise. 
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